feat(openshift): harden application integration

[tukue]

No description provided.

[amazon-q-developer]

This PR successfully hardens the OpenShift integration with security-focused improvements. The changes disable service account token automounting by default, add OPA policy validations for Routes and Deployments, and include comprehensive test coverage for the new security controls.

Key changes reviewed:

• Service account token automounting disabled by default (security best practice)
• OPA policies enforce TLS termination and reject insecure HTTP on Routes
• OPA policies prevent OpenShift-incompatible securityContext settings
• Template validations ensure proper configuration at render time
• Test coverage added for all new security validations
• Chart version bumped appropriately to 1.1.0

All security controls are properly implemented and tested. No defects found that would block merge.

---

You can now have the agent implement changes and create commits directly on your pull request's source branch. Simply comment with /q followed by your request in natural language to ask the agent to make changes.